appsec.fyi · Sources

cryptorank.io

5 curated AppSec resources from cryptorank.io across 3 topics on appsec.fyi.

cryptorank.io

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-08-28.

SSRF 3 API Sec 1 RCE 1
Date Added Resource Excerpt
2026-08-28 2026Sentry MCP Server SSRF Exposes How Agent Trust Chains Become Attack VectorsSSRFA Server-Side Request Forgery (SSRF) vulnerability has been discovered in the Sentry MCP server. This exploit allows attackers to leverage the server's trust in agent communication to perform unauthorized actions. The SSRF flaw enables malicious actors to make the Sentry MCP server issue requests to internal or external resources on their behalf, potentially leading to data breaches or further network compromise. This highlights a critical security weakness in how agent trust chains are managed and exploited.
2026-08-22 2026AWS AgentCore Harness Bypass Exposed a Cross-Platform Vulnerability Class in Agent RuntimesAPI SecWriteup on CVE-2026-18830 and CVE-2026-18953, detailing a cross-platform vulnerability class in agent runtimes. These high-severity flaws in AWS Bedrock AgentCore InvokeHarness and awslabs/aws-transform-mcp-server allowed unauthorized tool execution and arbitrary file writes via caller-supplied tool-use blocks and path traversal. The research highlights systemic risks in agent harnesses, including those found in Google ADK and Vercel AI SDK, emphasizing the need for stricter input validation and authorization checks.
2026-08-07 2026Critical RCE in IBM Langflow Triggers CISA Emergency DeadlineRCEWriteup of CVE-2026-9198, a critical RCE in IBM Langflow exploited by unauthenticated callers to mint SUPERUSER tokens and execute arbitrary Python code. This vulnerability, rated CVSS 9.8, triggered a CISA emergency deadline for federal agencies, requiring remediation to Langflow 1.10.2, disabling `LANGFLOW_AUTO_LOGIN`, and restricting API access. Recurring severe vulnerabilities like CVE-2026-33017 and CVE-2026-55255 highlight ongoing security risks in AI agent infrastructure.
2025-11-14 2025Researcher uncovers a critical SSRF vulnerability in ChatGPTs Custom GPT | Tech OpenAISSRFWriteup detailing a critical Server-Side Request Forgery (SSRF) vulnerability discovered in ChatGPT's Custom GPT "Actions" feature by researcher SirLeeroyJenkins. This SSRF flaw could have allowed attackers to expose internal cloud credentials by tricking the AI into making requests to unintended destinations. The vulnerability was exploited by chaining a 302 redirect with a custom API key mimicking the "Metadata: True" header required to access Azure's Instance Metadata Service, a technique previously used in security audits. OpenAI has since patched this issue, which was reported through their Bugcrowd program.
2025-11-13 2025Researcher uncovers a critical SSRF vulnerability in ChatGPTs Custom GPT | Tech OpenAISSRFWriteup detailing a critical SSRF vulnerability in ChatGPT's Custom GPTs, discovered by researcher SirLeeroyJenkins. The exploit leveraged the "Actions" feature's OpenAPI schema integration and a 302 redirect to bypass security restrictions, allowing access to internal cloud credentials via Azure's Instance Metadata Service. This technique, a variant of full-read SSRF, was successfully exploited by injecting a custom API key named "Metadata" with the value "true".